Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/m7K3o6zKpvccw8S7oHzkq7OVkd4.roa
File: m7K3o6zKpvccw8S7oHzkq7OVkd4.roa (raw, json)
Hash identifier: GgfDl73eI/b08tNz06PPsn6okyEEe2tBCJUd3Gjwvrs=
Subject key identifier: 9B:B2:B7:A3:AC:CA:A6:F7:1C:C3:C4:BB:A0:7C:E4:AB:B3:95:91:DE
Certificate issuer: /CN=46fe7b56722245116d4234be484a02a48a1dde1f
Certificate serial: 0194221F42678B8EB365BBBC1D6ABB36F0A0
Authority key identifier: 46:FE:7B:56:72:22:45:11:6D:42:34:BE:48:4A:02:A4:8A:1D:DE:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/m7K3o6zKpvccw8S7oHzkq7OVkd4.roa
Signing time: Wed 01 Jan 2025 13:47:41 +0000
ROA not before: Wed 01 Jan 2025 13:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205029
IP address blocks: 185.79.200.0/24 maxlen: 24
185.79.201.0/24 maxlen: 24
2a03:5e20::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:42:67:8b:8e:b3:65:bb:bc:1d:6a:bb:36:f0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46fe7b56722245116d4234be484a02a48a1dde1f
Validity
Not Before: Jan 1 13:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bb2b7a3accaa6f71cc3c4bba07ce4abb39591de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a0:a3:39:88:ef:7e:ce:37:85:f9:2f:67:05:
04:96:2e:39:76:75:17:f1:ae:71:6f:4d:c6:94:9d:
5b:39:78:7c:9a:b0:5d:36:59:0a:af:06:9a:42:29:
f0:55:59:64:8e:28:11:6e:ab:32:27:cc:eb:e1:39:
41:88:75:27:c6:db:eb:79:6b:ed:00:0c:8c:51:1d:
57:9c:c8:db:1d:dd:f7:28:ea:90:c8:f1:cb:c6:ff:
8f:8c:17:30:e0:d4:d2:0e:5e:4c:cd:3d:a1:aa:ff:
ab:c5:5d:5d:8f:5d:33:e4:41:c7:ab:43:bd:62:96:
59:86:7e:1c:9f:87:d2:0e:dd:78:70:02:e5:3e:ac:
48:0c:09:c1:b2:fe:00:0d:40:a4:66:80:ed:a0:7d:
6b:13:b8:37:84:15:f6:bc:aa:9e:08:05:5e:af:f1:
05:19:60:f2:9c:b2:ee:6b:8d:db:78:11:d2:ba:7f:
1c:50:3d:87:94:94:f9:3d:64:36:88:eb:57:c7:df:
02:1d:c4:fd:22:47:af:21:a5:db:b9:4b:55:89:4f:
36:ed:7a:d8:69:d0:49:3a:2a:af:69:28:d1:f5:64:
15:7c:c8:3f:65:a5:3e:35:a5:99:d5:c9:53:11:be:
a3:da:d0:95:72:8f:20:ee:30:cc:18:4a:b5:e1:f7:
51:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B2:B7:A3:AC:CA:A6:F7:1C:C3:C4:BB:A0:7C:E4:AB:B3:95:91:DE
X509v3 Authority Key Identifier:
keyid:46:FE:7B:56:72:22:45:11:6D:42:34:BE:48:4A:02:A4:8A:1D:DE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/m7K3o6zKpvccw8S7oHzkq7OVkd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.200.0/23
IPv6:
2a03:5e20::/32
Signature Algorithm: sha256WithRSAEncryption
0a:ad:b2:a5:3e:5d:82:b3:71:a7:35:a9:48:93:b6:a8:c5:b1:
54:4c:b8:02:1b:34:29:fd:14:fd:5c:0e:52:32:7b:3d:3b:b6:
83:58:18:99:93:b5:82:bb:85:67:61:9d:f7:d7:44:87:82:67:
e5:7d:cb:38:9b:40:ba:79:f3:c0:a7:3d:f7:d0:a2:d1:83:df:
6d:82:67:a4:88:82:96:7d:af:77:a4:30:a3:78:3b:8d:03:7d:
52:da:a8:4a:c1:b0:8d:37:b5:b3:f9:1f:5c:53:c7:b0:9c:2a:
cd:4a:d3:27:69:11:6f:21:34:b7:3a:5a:24:14:80:9e:85:73:
b5:4e:c0:19:65:35:a3:3d:0a:eb:08:68:8a:86:d9:45:65:20:
15:09:5b:a8:31:c1:60:95:a7:7c:a9:63:73:fa:e6:42:0f:dd:
90:3a:b9:6f:4e:67:b0:4d:d8:59:31:9d:b3:f3:0c:ab:08:b9:
e5:9d:dc:12:4f:b7:1f:1b:c3:8b:b0:c4:f6:ac:5f:a0:4b:1e:
d2:5d:d6:9c:ad:0c:56:bc:58:d0:a1:88:e5:63:85:a1:53:f9:
c9:ab:18:a2:54:2f:89:84:8b:2b:56:4d:36:82:b7:ab:6f:9c:
71:3b:c2:ad:6b:74:3e:df:25:e8:73:22:db:e9:a4:0b:75:83:
23:b1:cb:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:55:30 2025 by rpki-client